CWE-200 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-200 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2024-24919Potentially allowing an attacker to read certain information on Check Point Security Gateways once c…100.0%높음8.6● 실제 악용이 확인됨CVE-2021-41277Metabase is an open source data analytics platform. In affected versions a security issue has been d…97.2%높음7.5● 실제 악용이 확인됨CVE-2016-6415The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through…87.7%높음7.5● 실제 악용이 확인됨CVE-2023-28432Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-…84.0%높음7.5● 실제 악용이 확인됨CVE-2023-49103An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The…77.8%높음7.5● 실제 악용이 확인됨CVE-2025-31125Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using…74.9%높음7.5● 랜섬웨어 캠페인에 사용됨CVE-2020-3259A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software an…71.5%높음7.5● 실제 악용이 확인됨CVE-2016-2388The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain …52.2%보통5.3
전체 목록
120건
CVE-2018-5430악용 확인The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community…48.1%높음8.8
CVE-2008-0655악용 확인Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack v…37.9%높음8.8
CVE-2026-20133악용 확인A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sens…31.5%높음7.5
CVE-2025-68686악용 확인An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortine…29.5%보통5.9
CVE-2015-5317악용 확인The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain s…23.0%높음7.5
CVE-2015-0310악용 확인Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11…15.1%높음7.8
CVE-2022-20821악용 확인A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attack…11.5%보통6.5
CVE-2026-20805악용 확인Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized att…7.5%보통5.5
CVE-2021-25369악용 확인An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive ker…1.1%보통5.5
CVE-2023-21237악용 확인In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service not…0.3%보통5.5
CVE-2026-69806Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate pr…1.8%높음7.0
CVE-2026-78851Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive…1.1%보통6.5
CVE-2026-85891Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker …0.9%높음7.5
CVE-2026-120192A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the…0.9%보통5.5
CVE-2026-54649punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private…0.8%낮음2.1
CVE-2026-114623baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authent…0.7%보통6.5
CVE-2026-54617GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticat…0.7%심각9.8
CVE-2026-63646CordysCRM is an open source AI-powered customer relationship management system that supports private deploymen…0.7%보통6.9
CVE-2026-91153The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPres…0.6%보통5.3
CVE-2026-110305The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in a…0.6%높음7.5
CVE-2026-107755Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all pla…0.6%보통6.0
CVE-2026-9289The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in…0.6%보통5.3
CVE-2026-112953ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module,…0.6%보통6.0
CVE-2026-76825RestrictedPython is a tool that helps define a subset of the Python language for accepting program input in a …0.6%높음8.4
CVE-2026-63190FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior to versio…0.5%심각9.4
CVE-2026-92708Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficien…0.6%높음7.5
CVE-2026-94413jshERP through 3.6 fails to redact password hashes in the /user/info endpoint, allowing authenticated users to…0.5%높음7.1
CVE-2026-76710A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the …0.5%높음7.5
CVE-2026-94148A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExportJSON of th…0.5%보통5.5
CVE-2026-93971A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file back…0.5%보통6.9
CVE-2026-87820CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose ad…0.5%보통6.9
CVE-2026-92927A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown pr…0.5%보통5.5
CVE-2026-88874AVideo through revision c3edcc274c389816d434acadac07ee78eaf330c1 (master, 2026-08-23) does not enforce the Liv…0.5%높음8.7
CVE-2026-54554FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the …0.5%높음7.5
CVE-2026-69805External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a net…0.5%높음7.5
CVE-2026-85517A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown funct…0.5%보통5.5
CVE-2026-110217Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any authenticate…0.5%높음7.1
CVE-2026-103091Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MC…0.5%심각9.3
CVE-2026-95693In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmp_name field by invoking file_…0.5%보통5.3
CVE-2026-95703In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with file…0.5%보통5.1
CVE-2026-85251Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This …0.5%높음7.5
CVE-2026-91157Discourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, sites wi…0.5%높음7.5
CVE-2026-108578A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.…0.5%보통6.9
CVE-2026-56833PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Cont…0.5%높음7.5
CVE-2026-112147A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown f…0.5%보통5.5
CVE-2026-86059Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy organization members …0.5%심각9.6
CVE-2026-62264PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior…0.5%높음7.5
CVE-2026-69862Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose inf…0.5%보통5.5
CVE-2026-106501Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @ba…0.5%심각9.6
CVE-2026-93677IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive informat…0.5%높음7.7
CVE-2026-61749InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, privileged staff users who can author…0.5%보통6.5
CVE-2026-116122A security flaw has been discovered in NocoDB up to 2026.07.0. Impacted is the function AuthService.validateUs…0.4%보통6.3
CVE-2026-48503libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sa…0.5%높음7.5
CVE-2026-76697A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allo…0.5%보통6.5
CVE-2026-67100HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerab…0.5%심각9.8
CVE-2026-51995An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information v…0.5%높음7.5
CVE-2026-101055A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the fu…0.5%보통5.5
CVE-2026-78164Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to…0.4%높음8.2
CVE-2013-10077A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octop…0.4%보통5.5
CVE-2026-78795An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and befor…0.5%높음7.5
CVE-2026-116478A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the…0.4%보통6.9
CVE-2026-92947vm2 before 3.11.7 exposes Node's shared Buffer pool to sandboxed code, allowing disclosure of host memory used…0.4%심각10.0
CVE-2026-84990ntopng is a web-based network traffic monitoring application. Prior to 6.7.260718, scripts/lua/rest/v2/get/sys…0.5%높음8.8
CVE-2026-105635Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/{s…0.4%높음7.4
CVE-2026-111755follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 …0.4%높음8.2
CVE-2026-92960vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: ['*'] configuration, allo…0.4%심각10.0
CVE-2026-63618Exposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnerability in …0.4%높음7.5
CVE-2026-76706A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthent…0.4%보통5.3
CVE-2026-120233A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of …0.4%보통5.5
CVE-2026-93685A flaw was found in the multicluster-observability-addon. A remote attacker can access a debug endpoint withou…0.4%보통5.4
CVE-2026-112947Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of fi…0.4%보통6.3
CVE-2026-89278The GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI plugin for Word…0.4%보통5.3
CVE-2026-84179Description getTopologyPageInfo merged the Nimbus daemon configuration with the topology's own configuration a…0.4%보통6.5
CVE-2026-73178Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Syncope. An administrator w…0.4%높음7.5
CVE-2026-92404The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST API endpoint…0.4%높음7.5
CVE-2026-91965WWBN AVideo through 29.0 fails to enforce user-group restrictions in the plugin/Live/stats.json.php and plugin…0.4%높음8.7
CVE-2026-104110FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior …0.4%보통5.3
CVE-2026-90881A weakness has been identified in D-Link DIR-882 up to 20260814. Impacted is the function main of the file /HN…0.4%보통5.5
CVE-2026-76712A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, info…0.4%높음7.3
CVE-2026-78163Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Travers…0.4%보통5.9
CVE-2026-85055Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.22.0, field-level read pe…0.4%높음7.1
CVE-2026-55870GoCD is a continuous deliver server. Prior to 26.1.0, GoCD can return unmasked credentials that administrators…0.4%낮음2.3
CVE-2026-77132It has been discovered that several AJAX routes used for the backend localization wizard failed to perform aut…0.4%보통5.3
CVE-2026-110696A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c99123…0.4%보통5.5
CVE-2026-116685The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and client…0.4%보통5.9
CVE-2026-116507A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is th…0.4%보통5.5
CVE-2026-76307In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could u…0.4%높음7.2
CVE-2026-76717A vulnerability exists in the Analytics and Location Engine (ALE) API that may allow for the disclosure of sen…0.4%보통5.3
CVE-2026-112948Vitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can misapply …0.4%보통6.5
CVE-2026-53920odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before …0.4%높음8.7
CVE-2026-64684RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.1.0, the rmcp crate's StreamableHttpCl…0.4%보통6.8
CVE-2026-109325Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that t…0.4%높음8.7
CVE-2026-76805Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz pay…0.4%보통5.3
CVE-2026-76749A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unaut…0.4%보통6.5
CVE-2026-110777A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property a…0.4%보통5.7
CVE-2026-81270Apache Allura: exposure of non-public information via search. This issue affects Apache Allura: through 1.20.0…0.4%높음7.5
CVE-2026-67410RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.3.3 and 4.2.9, OAuth2 Client Secret Exposed v…0.4%높음8.2
CVE-2026-89248AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization chec…0.4%보통6.9
CVE-2026-107715The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize sends calle…0.4%보통6.8
CVE-2026-55836Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.13.0 until 1.27.2,…0.4%보통6.8
CVE-2026-91985Vikunja before 2.6.0 fails to properly restrict access to the link-share hash field in single-share read endpo…0.4%높음8.7
CVE-2026-81531An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for …0.4%보통6.9
CVE-2026-69197Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and P…0.4%높음8.7
CVE-2026-78474The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisatio…0.4%보통5.3
CVE-2026-54529SQLAdmin is a flexible Admin interface for SQLAlchemy models. Prior to 0.27.1, ModelView.sort_query in sqladmi…0.4%보통5.3
CVE-2026-105639Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User …0.4%심각9.8
CVE-2026-86064Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /l…0.4%높음8.6
CVE-2026-61746InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, PluginSettingList, PluginAllSettingLi…0.4%보통5.3
CVE-2026-56834PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Cont…0.4%높음7.5
CVE-2026-107383MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases.…0.4%높음7.5
CVE-2026-88065`tts-be` is a backend for a timetable selector that aims to help students better choose their class schedules.…0.4%높음7.5
CVE-2026-61730SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In aff…0.4%심각9.3
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.